Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: wyxqw.com
Result:
HTTP/1.1 301 Moved Permanently
Connection: Close
Date: Fri, 03 Oct 2014 14:50:07 GMT
Location: http://www.wyxqw.com
Server: Apache Tomcat/4.1.27-LE-jdk14 (HTTP/1.1 Connector)
Content-Type: text/html
GET / HTTP/1.1
Host: wyxqw.com
Result:
HTTP/1.1 301 Moved Permanently
Connection: Close
Date: Fri, 03 Oct 2014 14:50:07 GMT
Location: http://www.wyxqw.com
Server: Apache Tomcat/4.1.27-LE-jdk14 (HTTP/1.1 Connector)
Content-Type: text/html
Second query (visit from search engine):
GET / HTTP/1.1
Host: wyxqw.com
Referer: http://www.google.com/search?q=wyxqw.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: wyxqw.com
Referer: http://www.google.com/search?q=wyxqw.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
| Request | Server response | Status |
http://wyxqw.com/ | HTTP/1.1 301 Moved Permanently Connection: Close Date: Fri, 03 Oct 2014 14:50:07 GMT Location: http://www.wyxqw.com Server: Apache Tomcat/4.1.27-LE-jdk14 (HTTP/1.1 Connector) Content-Type: text/html | clean |
http://www.wyxqw.com/ | HTTP/1.1 200 OK Date: Fri, 03 Oct 2014 14:52:25 GMT Accept-Ranges: bytes ETag: "e2c1ff2728dbcf1:1441a" Server: Microsoft-IIS/6.0 Content-Length: 44953 Content-Location: http://www.wyxqw.com/index.htm Content-Type: text/html Last-Modified: Sun, 28 Sep 2014 14:26:13 GMT X-Powered-By: ASP.NET | clean |
http://www.wyxqw.com/index.htm | 200 OK Content-Length: 44953 Content-Type: text/html | clean |
http://www.wyxqw.com/cert/icon.gif | 200 OK Content-Length: 1421 Content-Type: image/gif | clean |
http://www.wyxqw.com/test404page.js | 404 Not Found Content-Length: 1387 Content-Type: text/html | clean |
http://www.45888888.com/cai/f.js | 200 OK Content-Length: 284 Content-Type: application/x-javascript | clean |
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=wyxqw.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://wyxqw.com/
Result: wyxqw.com is not infected or malware details are not published yet.
Result: wyxqw.com is not infected or malware details are not published yet.